Authorization not available. Check if polkit service is running or see debug message for more information.

Issues related to applications and software problems
sudheerp494
Posts: 32
Joined: 2019/04/01 17:29:22

Re: Authorization not available. Check if polkit service is running or see debug message for more information.

Post by sudheerp494 » 2019/04/04 22:03:05

here is /etc/nscd.conf
Attachments
org 04022019.PNG
org 04022019.PNG (36.7 KiB) Viewed 4248 times

sudheerp494
Posts: 32
Joined: 2019/04/01 17:29:22

Re: Authorization not available. Check if polkit service is running or see debug message for more information.

Post by sudheerp494 » 2019/04/05 16:26:55

Hi,

Do you get chance to review my issue.

hunter86_bg
Posts: 2019
Joined: 2015/02/17 15:14:33
Location: Bulgaria
Contact:

Re: Authorization not available. Check if polkit service is running or see debug message for more information.

Post by hunter86_bg » 2019/04/06 17:44:49

As the system was without nscd, the first that comes to my mind is to get rid of it and try the situation.
Most probably a reboot will be needed (at least it won't hurt).

sudheerp494
Posts: 32
Joined: 2019/04/01 17:29:22

Re: Authorization not available. Check if polkit service is running or see debug message for more information.

Post by sudheerp494 » 2019/04/06 17:54:24

Shall I reinstall nscd and reboot the box.

pjsr2
Posts: 614
Joined: 2014/03/27 20:11:07

Re: Authorization not available. Check if polkit service is running or see debug message for more information.

Post by pjsr2 » 2019/04/06 21:17:59

At this point, I would disable nscd and then reboot.

If polkit still doesn't start after disabling nscd, comment out all lines in /etc/nscd.conf and reboot again.

Note that the reboots are required.

It is hard to tell what exactly is wrong on your machine. Currently, I am reasoning along the following line:
Polkit governs the policies that define whether or not a user process is allowed to communicate with kernel services along D-Bus. If polkit cannot start correctly, it either has problems while reading the policy files (in /etc/polkit-1 or /usr/share/polkit-1) or when getting information about users and their privileges (user name/id, groups). Since you are using windbindd (see /etc/nsswitch.conf) , part of this user/group information is coming from a remote host (the winbind server) and catching of that information is done by nscd. As installing nscd started the problems, I don't think that there are problems with the polkit-1 files. I think is is more likely that either nscd is not configured properly, or the use of nscd makes that issues with the authorization services provided by the winbind server now start to surface, where before these issues were failing more quietly.

User avatar
TrevorH
Site Admin
Posts: 33202
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Authorization not available. Check if polkit service is running or see debug message for more information.

Post by TrevorH » 2019/04/07 00:44:49

I think he didn't have nscd even installed at the start of this thread, it was something that got installed as part of the "try this" so far. I also think there's something wrong with dbus and I'm not entirely sure that it's not the root cause of the problems.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

hunter86_bg
Posts: 2019
Joined: 2015/02/17 15:14:33
Location: Bulgaria
Contact:

Re: Authorization not available. Check if polkit service is running or see debug message for more information.

Post by hunter86_bg » 2019/04/07 11:40:30

Full package check would show of any package is broken/missing files/deps.

Code: Select all

rpm -qa | sort
rpm -Va 

pjsr2
Posts: 614
Joined: 2014/03/27 20:11:07

Re: Authorization not available. Check if polkit service is running or see debug message for more information.

Post by pjsr2 » 2019/04/07 11:46:36

Thanks for pointing put TrevorH. I missed the following:
Issue started in last July. I took chair in August. What was background picture. Nobody knows as well.

Did you edit nsswitch.conf ?
No.
Did you reconfigure nscd ? If yes, is it working ?
Nscd was missing on this host. I just installed it. Given #systemctl reboot. But no luck.
As polkit already failed to start before installation of nscd, I think it is worth to try to exclude if the use of winbind is causing the problems.

1) Disable nscd.
2) In /etc/nsswitch.conf, remove winbind from the lines for password, group and shadow.
3) Reboot.

sudheerp494
Posts: 32
Joined: 2019/04/01 17:29:22

Re: Authorization not available. Check if polkit service is running or see debug message for more information.

Post by sudheerp494 » 2019/04/08 18:43:14

Doesn't show any result with above lines. Still seeing below errors in "/var/log/messages" from server.

Failed to initialize kerberos context! (Included profile directory could not be read)
winbindd[1669]: [2019/04/08 11:41:06.328174, 0] ../source3/librpc/crypto/gse.c:212(gse_context_init)

pjsr2
Posts: 614
Joined: 2014/03/27 20:11:07

Re: Authorization not available. Check if polkit service is running or see debug message for more information.

Post by pjsr2 » 2019/04/08 19:45:04

Does your /etc/krb5.conf file contain "include" lines with non-existing directories?

Post Reply